$ rpki-client -vvf rpki-rsync.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/5FA887D4C422964FB68CDD877D9AB417360C2EB5.mft File: 5FA887D4C422964FB68CDD877D9AB417360C2EB5.mft (raw, json) Hash identifier: od+aKE3ofAotIIjpzCqb4YMqYfG26ISfk2yTPcNVbRk= Subject key identifier: D3:CE:29:BA:81:1B:44:9B:65:17:44:41:8F:FA:B8:B6:9C:36:24:7F Authority key identifier: 5F:A8:87:D4:C4:22:96:4F:B6:8C:DD:87:7D:9A:B4:17:36:0C:2E:B5 Certificate issuer: /CN=5FA887D4C422964FB68CDD877D9AB417360C2EB5 Certificate serial: 496ADE91EEAD178EEEA249B796D74AC0E84B52E9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FA887D4C422964FB68CDD877D9AB417360C2EB5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/5FA887D4C422964FB68CDD877D9AB417360C2EB5.mft Manifest number: 0F Signing time: Tue 12 May 2026 18:59:37 +0000 Manifest this update: Tue 12 May 2026 18:54:37 +0000 Manifest next update: Wed 13 May 2026 22:23:37 +0000 Files and hashes: 1: 3130332e3133362e342e302f32322d3234203d3e203338333230.roa (hash: opi4UEK669uRcBpJCe+2Ayk5Lle5+nKJNqzpjbTh2ik=) 2: 5FA887D4C422964FB68CDD877D9AB417360C2EB5.crl (hash: 2XceJIyMJ/EVbPk8yLbqbqeNSiqKgr32WOCII0BBv9g=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/5FA887D4C422964FB68CDD877D9AB417360C2EB5.crl rsync://rpki-rsync.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/5FA887D4C422964FB68CDD877D9AB417360C2EB5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FA887D4C422964FB68CDD877D9AB417360C2EB5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 22:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:6a:de:91:ee:ad:17:8e:ee:a2:49:b7:96:d7:4a:c0:e8:4b:52:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FA887D4C422964FB68CDD877D9AB417360C2EB5 Validity Not Before: May 12 18:54:37 2026 GMT Not After : May 13 22:23:37 2026 GMT Subject: CN=D3CE29BA811B449B651744418FFAB8B69C36247F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:77:e2:2c:3d:69:8c:76:69:b7:9f:fa:b3:ad: 42:a9:f9:24:7a:22:89:ce:53:73:bc:9c:a0:29:78: 43:60:26:11:b7:80:3b:cb:f6:07:21:11:b0:b3:4f: 67:d1:dc:0c:4f:b2:1b:1e:b6:3f:42:d6:44:2e:81: 60:e8:9a:b3:68:63:69:1a:4c:be:44:52:3c:b2:41: ca:23:d2:59:0b:7f:97:f0:c1:3a:e2:66:92:d1:6b: 12:f6:54:38:08:ea:84:a0:23:0b:5d:d1:fd:50:6c: b8:db:35:35:3e:b0:ac:d3:94:e0:ce:72:9e:04:a2: d2:e5:b8:1d:47:42:24:a3:50:63:bf:53:e4:ae:bf: 63:99:23:be:44:63:2d:cc:d2:c1:57:d4:48:b3:95: b1:51:b0:d9:5d:2c:22:10:0b:c3:3d:65:28:6a:b2: 66:15:38:5c:f3:90:1c:1b:20:07:28:9e:f5:72:4a: e0:7e:bc:9c:c0:c1:e7:7d:c5:8f:4b:24:1c:56:0b: 66:4e:7b:11:e9:94:fc:95:89:46:f0:97:08:2d:1c: 6e:4c:8c:cd:cc:00:82:3f:e9:25:a1:76:8e:24:d0: 2b:a8:09:91:ee:8f:f1:b1:61:9a:ac:2a:7a:ce:0c: 71:13:b0:84:78:79:79:7f:a7:05:51:02:37:66:4c: cb:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:CE:29:BA:81:1B:44:9B:65:17:44:41:8F:FA:B8:B6:9C:36:24:7F X509v3 Authority Key Identifier: keyid:5F:A8:87:D4:C4:22:96:4F:B6:8C:DD:87:7D:9A:B4:17:36:0C:2E:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/5FA887D4C422964FB68CDD877D9AB417360C2EB5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FA887D4C422964FB68CDD877D9AB417360C2EB5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/5FA887D4C422964FB68CDD877D9AB417360C2EB5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:3b:78:1b:5c:56:90:a8:c9:a4:05:3b:9e:b5:d5:a5:89:e3: 70:ea:df:55:b8:45:99:b0:f5:9a:67:41:73:9f:e6:71:17:3c: 72:9a:ff:5b:ac:7b:e0:93:69:26:4e:9b:4c:1c:ed:70:63:45: b7:3b:a6:d4:ff:51:1f:ee:16:81:97:d0:95:bb:d4:76:10:5c: 1a:d0:70:cc:82:21:24:7f:1f:71:cd:41:46:c7:b0:78:53:cd: 1d:6c:59:08:c1:ba:63:15:99:fe:3a:ae:3f:91:36:0a:e9:e7: a2:54:e7:04:88:a6:e2:80:fc:4f:37:f7:ea:06:69:69:f7:ad: 30:ae:32:f8:b0:28:ae:17:59:66:55:fc:ff:86:42:8f:d6:4e: 24:15:08:12:83:9a:5c:84:02:29:0c:a4:1b:8e:11:8b:81:95: fb:32:ea:87:9c:48:7d:40:55:bd:93:df:a3:78:f6:2a:05:12: 4a:64:cb:b8:b6:75:30:07:f5:8f:59:fe:7e:be:ca:87:7c:45: a6:a8:28:30:71:17:23:ad:92:da:dd:27:16:12:06:53:cc:19: ad:32:07:2e:d0:91:51:66:e4:b8:59:83:c1:f6:19:ab:7f:9c: c5:00:3a:bb:49:16:5d:8c:1c:eb:80:f0:64:7c:bb:0e:b1:1a: e9:75:6d:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSWreke6tF47uokm3ltdKwOhLUukwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZBODg3RDRDNDIyOTY0RkI2OENERDg3N0Q5QUI0MTcz NjBDMkVCNTAeFw0yNjA1MTIxODU0MzdaFw0yNjA1MTMyMjIzMzdaMDMxMTAvBgNV BAMTKEQzQ0UyOUJBODExQjQ0OUI2NTE3NDQ0MThGRkFCOEI2OUMzNjI0N0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfd+IsPWmMdmm3n/qzrUKp+SR6 IonOU3O8nKApeENgJhG3gDvL9gchEbCzT2fR3AxPshsetj9C1kQugWDomrNoY2ka TL5EUjyyQcoj0lkLf5fwwTriZpLRaxL2VDgI6oSgIwtd0f1QbLjbNTU+sKzTlODO cp4EotLluB1HQiSjUGO/U+Suv2OZI75EYy3M0sFX1EizlbFRsNldLCIQC8M9ZShq smYVOFzzkBwbIAconvVySuB+vJzAwed9xY9LJBxWC2ZOexHplPyViUbwlwgtHG5M jM3MAII/6SWhdo4k0CuoCZHuj/GxYZqsKnrODHETsIR4eXl/pwVRAjdmTMvFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU084puoEbRJtlF0RBj/q4tpw2JH8wHwYDVR0j BBgwFoAUX6iH1MQilk+2jN2HfZq0FzYMLrUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWM0NWMyMmMtMjc1Yi00Mjk1LWI0NTMtNjBhNzgzYjljNDJhLzAvNUZBODg3RDRD NDIyOTY0RkI2OENERDg3N0Q5QUI0MTczNjBDMkVCNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RkE4ODdENEM0MjI5NjRGQjY4Q0REODc3RDlBQjQxNzM2MEMy RUI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWM0NWMyMmMtMjc1Yi00Mjk1LWI0 NTMtNjBhNzgzYjljNDJhLzAvNUZBODg3RDRDNDIyOTY0RkI2OENERDg3N0Q5QUI0 MTczNjBDMkVCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ07eBtcVpCoyaQFO5611aWJ43Dq31W4RZmw 9ZpnQXOf5nEXPHKa/1use+CTaSZOm0wc7XBjRbc7ptT/UR/uFoGX0JW71HYQXBrQ cMyCISR/H3HNQUbHsHhTzR1sWQjBumMVmf46rj+RNgrp56JU5wSIpuKA/E839+oG aWn3rTCuMviwKK4XWWZV/P+GQo/WTiQVCBKDmlyEAikMpBuOEYuBlfsy6oecSH1A Vb2T36N49ioFEkpky7i2dTAH9Y9Z/n6+yod8RaaoKDBxFyOtktrdJxYSBlPMGa0y By7QkVFm5LhZg8H2Gat/nMUAOrtJFl2MHOuA8GR8uw6xGul1bSA= -----END CERTIFICATE-----Generated at Wed May 13 04:08:58 2026 by rpki-client